{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.0.12"}],"component":"frozennode/administrator","cve_ids":["CVE-2020-10963"],"ecosystem":"Packagist","epss":0.14667,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9r2j-rg24-fvpj","id":"tcs_01M5KF08Q7NBF906H54V4M50KJ","modified_at":"2024-04-23T23:11:43.262853Z","published_at":"2022-05-24T17:12:48Z","references":["https://osv.dev/vulnerability/GHSA-9r2j-rg24-fvpj","https://nvd.nist.gov/vuln/detail/CVE-2020-10963","https://xavibel.com/2020/03/23/unrestricted-file-upload-in-frozennode-laravel-administrator","http://packetstormsecurity.com/files/160243/Laravel-Administrator-4-File-Upload.html"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-9r2j-rg24-fvpj","url":"https://osv.dev/vulnerability/GHSA-9r2j-rg24-fvpj"}],"summary":"FrozenNode Laravel-Administrator unrestricted file upload"}